Unsupervised learning techniques for an intrusion detection system

By Stefano Zanero, Sergio M. Savaresi. ACM Symposium on Applied Computing, 2004

318 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Computer Networks and Communications

View Paper: https://www.semanticscholar.org/paper/429902ed7356b93df99aebaf2c5e713a50e82d4d

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Computer Networks and Communications

Citations in the corpus

Survey on SDN based network intrusion detection system using machine learning approaches (2018, methodology): “A self-organizing map (SOM) is an artificial neural network that was used to reduce payload in NIDS [16].”
A comprehensive survey on machine learning for networking: evolution, applications and research opportunities (2018, methodology): “[493] propose a two-tier architecture for anomaly detection.”
Language models for detection of unknown attacks in network traffic (2007, background): “intrusion detection have been proposed that analyze payloads of packets and connections [8,11–13,15–18].”
A Survey of Stealth Malware Attacks, Mitigation Measures, and Steps Toward Autonomous Open World Solutions (2016, background): “predominantly use pre-written scripts to propagate existing attacks [112].”
Unsupervised Anomaly Detection in Network Intrusion Detection Using Clusters (2005, background): “In (Zanero & Savaresi 2004), a novel two-tier IDS is proposed.”
Unsupervised Machine Learning for Networking: Techniques, Applications and Research Challenges (2017, methodology): “[194] Two-Tier Clustering Applied a novel bi-layered clustering technique, in which the first layer constitutes of clustering of packets and the second layer is responsible for anomaly detection and time correlation, to detect intrusions.”
Data preprocessing for anomaly based network intrusion detection: A review (2011, background): “This has led to speculation that signature-based AV and intrusion detection is unsustainable (Zanero and Savaresi, 2004).”
The use of computational intelligence in intrusion detection systems: A review (2010, background): “Zanero [283, 285] was another supporter who suggested to consider payload of network packets in the analysis.”
Critical infrastructure protection: Requirements and challenges for the 21st century (2015, background): “In fact, data-mining [82] techniques can be leveraged to predict and discover new behavior patterns through specific techniques, such as sequential patterns [76] or time series and statistical analysis [15].”